Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Simple Web Server Connection Header Buffer Overflow
Vulnerability Description
Simple Web Server 2.2 rc2 contains a stack-based buffer overflow vulnerability in its handling of the Connection HTTP header. When a remote attacker sends an overly long string in this header, the server uses vsprintf() without proper bounds checking, leading to a buffer overflow on the stack. This flaw allows remote attackers to execute arbitrary code with the privileges of the web server process. The vulnerability is triggered before authentication.
CVSS Information
N/A
Vulnerability Type
栈缓冲区溢出
Vulnerability Title
PMSoftware Simple Web Server 安全漏洞
Vulnerability Description
PMSoftware Simple Web Server是PMSoftware开源的一个简单的HTTP服务器应用。 PMSoftware Simple Web Server 2.2 rc2版本存在安全漏洞,该漏洞源于Connection HTTP标头处理不当,可能导致栈缓冲区溢出和远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A